URL based basic auth causes an infinite digest loop when setting $location.path

[blindworld]

If I supply a username / password in the URL such as "http://user@myurl" then any navigation done on that page through the $location.path setter results in an infinite digest loop.

Removing the "user@" portion of the url fixes the issue and navigation behaves normally.

[blindworld]

I created a small poorly named demonstration of the bug using protractor and express.js:

https://github.com/blindworld/ProtractorTest/blob/master/app/test/test.js

[btford]

Please:

1. Provide a reproduction via jsbin, plnkr.co or jsfiddle.
2. Check that the problem persists after updating Angular.

This saves us a lot of time. Thanks!

[blindworld]

1. It's not possible to reproduce in any of those sites because none of them allow you to add authentication credentials to the URL. http://plnkr.co/WOH4ygXi6dI1redBBktv has a button that would be able to demonstrate the issue if plunker would allow it, but the redirect returns a 404 instead of logging in the user.
2. As of 1.2.20 it still exists, we have not upgraded anything to the beta version yet.

[danhaller]

We've also encountered this problem.

We use the user@pass format in urls for our protractor tests, which cannot enter text into login prompts raised by the browser.

If the page does a location replace it will result in an infinite digest.

[eh1160]

It would be nice to get this fixed. It would certainly speed up our protractor tests if we could switch users with the user@url format

[nathan-osg]

We are seeing this on my project as well. We noticed it not specifically when calling $location.path directly, but just going to our index.html page with creds in the URL. ie. https://admin:password@dev.example.com/app/app1/index.html

The very first error, before the inifinit digest error seems to be:

Error: Failed to execute 'replaceState' on 'History': A history state object with URL 'https://dev.example.com/app/app1/' cannot be created in a document with origin 'https://dev.example.com' and URL 'https://admin:password@dev.example.com/app/app1/index.html'.